Germany’s Top AI Firms Fail to Clearly Explain How They Use User Data

A fresh study says most top AI firms in Germany won’t tell users the full truth about their data. The Cybernews AI Trustworthiness Ranking 2026 checked 500 AI companies across 36 countries. It looked at security, data privacy, transparency, and public reviews. German firms scored 66 out of 100 on average. That sits just above the global average of 65.

How German AI Firms Scored Overall

The ranking studied 18 German AI companies. These firms work in fields like AI assistants, productivity tools, coding, and music. Each company earned a score built from four parts.

Security came out weakest for German firms, at just 38 out of 100. Even so, that beats the UK’s average security score of 29. This part of the study checks for a security page, a bug bounty program, and certificates like ISO/IEC 27001 or SOC 2.

Transparency told a different story. German companies scored 98 out of 100 here, edging out the UK’s score of 90. This part checks if a firm shares its legal name, address, and a real way to contact them. Most German firms passed this test easily.

Public reviews on sites like Trustpilot and G2 gave German firms a score of 71. That beats the European average of 70 by a small margin. Data privacy landed at 67, a touch below Europe’s average of 69.

Voldemaras Kadys sits on the ranking’s advisory board and leads security work at Mediatech, the publisher behind Cybernews. He said the ranking aims to show users and firms how AI companies treat data and security.

Also, he added that it worries him that so many top German AI firms stay silent on whether they train models with customer data. He believes firms should never treat transparency as optional when they hold user data.

Data Privacy Rules Stay Vague or Missing

The privacy score checked how each firm’s policy explains data use. It looked at how firms collect, share, use, and store user information.

The study found that 83% of top German AI firms don’t clearly say if they train their models on user data. Half of these firms never mention AI training at all in their privacy rules. Another third only use unclear wording that leaves users guessing.

The data security risks highlighted by the Cybernews ranking are not hypothetical. Microsoft has tracked The Gentlemen ransomware, which has claimed victims across 38 countries, as a major threat that leverages stolen credentials and unpatched vulnerabilities to gain access to corporate networks, underscoring why companies handling sensitive user data must implement robust security controls.

Data storage rules showed a similar gap. About 61% of German AI firms don’t state how long they keep user data. These firms give vague wording instead of clear timeframes. This gap makes it hard for users to know when their data disappears for good.

Wider results from the full AI trustworthiness ranking back this pattern up. Across all 500 firms studied worldwide, most also stayed quiet on training and storage rules. The German numbers sit close to this global trend.

n8n and Pitch Lead the German Rankings

Workflow tool n8n earned the top spot among German AI firms, with a score of 86 out of 100. Pitch followed close behind at 81. Synthflow AI came next with 78, then Clickworker with 74, and Beam AI with 73.

Office and productivity tools performed best as a group in Germany. This category averaged 81 out of 100, the highest of any German AI category. Music and audio tools ranked lowest, with an average score of just 47.

This pattern matches what researchers saw in the US market too. There, office and productivity tools also ranked first, while music tools landed at the bottom. The gap between these two categories stayed wide in both countries.

The findings point to a bigger issue across the AI industry. Even strong overall scores can hide weak spots in specific areas like security or privacy. Users who trust an AI tool with personal data may not always know how that data gets used.

For now, most top German AI firms leave users guessing about their data. Until firms update their privacy rules with clearer language, users may want to read policies closely. Checking a company’s data rules before signing up remains a smart habit.